The kernel exposes stale or uninitialized memory to the block layer when a failed ESE read is marked successful. The buggy logic allows the block layer to receive data that was never cleared, potentially revealing sensitive data from the destination buffer. This flaw does not provide code execution but can lead to leakage of confidential memory contents as it bypasses normal zeroing of the buffer after a failed read.

The vulnerability affects the Linux kernel for the s390 architecture, specifically the dasd subsystem handling ESE tracks. No specific kernel version range is listed, so any kernel with the referenced code paths that has not yet applied the patch is potentially impacted.

The CVSS score of 4.7 indicates moderate severity. The EPSS score is 0.00168 (0.168%) and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector is inferred as local or privileged, requiring the attacker to trigger a read of an unallocated ESE track, which would then cause the block layer to read stale data. The impact is limited to information disclosure and does not provide remote code execution or denial of service.